Commit Graph
23 Commits
Author SHA1 Message Date
elky 579f2c7cc1 feat(security): harden gateway boundaries and usage policies
Consolidate subscription usage policy enforcement, privacy-safe persistence, and gateway security hardening into one reviewable change.

Includes bounded HTTP and execution envelopes, header and protocol guards, DNS and relay validation, authentication and secret projection hardening, secure backup/install paths, and regression coverage.
2026-09-04 03:45:52 +08:00
fawney 2cb4d554aa feat(routing): consolidate scheduling strategy configuration 2026-09-03 11:05:59 +08:00
elky ef7caa40e7 ci: publish nightly builds from main 2026-09-01 16:43:29 +08:00
Kayphoon 72d43878ef fix(install): remove pg single-node migration entrypoint 2026-05-25 01:14:37 +08:00
fawney19 e1df06f06c revert compose data layout to legacy paths 2026-05-24 00:37:03 +08:00
fawney19 5643b2c901 feat: add compose data layout migration helper 2026-05-23 20:51:02 +08:00
fawney19 18eac2dd7a feat: clarify deployment update strategies 2026-05-23 20:14:26 +08:00
zhiqicloud b59c3a9e3b feat: support admin online update and deploy flow 2026-05-22 15:15:17 +08:00
zhiqicloud 9562295d8b feat: 添加在线更新功能 2026-05-20 22:29:11 +08:00
HsungKayphoon f9f1fa928a refactor: drive pg sqlite copy from target schema 2026-05-16 17:29:14 +08:00
HsungKayphoon 4b12ec8913 feat: add postgres to single-node migration 2026-05-16 15:26:43 +08:00
fawney19 1503986d40 Fix compose installer defaults 2026-05-15 18:43:47 +08:00
RWDai 870bb19798 Update proxy installer branch references 2026-05-15 01:21:08 +08:00
fawney19 e61aa46dad deploy: limit installer to supported modes 2026-05-14 15:26:58 +08:00
fawney19 d2831ec6f0 deploy: remove local build compose path 2026-05-14 14:40:25 +08:00
fawney19 a7e71624e3 ci: align release channels and speed rust checks 2026-05-14 14:09:27 +08:00
Kayphoon d69d862034 feat(compose): add solo sqlite compose deployment 2026-05-13 11:21:35 +08:00
Kayphoon 6d2fcf12cd feat(install): add macOS native one-click install with launchd
- Release workflow builds macos-amd64/macos-arm64 tarballs on native runners
- install.sh detects Darwin, downloads macos-* assets, installs LaunchDaemon
- Dedicated _aether service account (dscl), env root:_aether 0640
- Launchd stdout/stderr in /var/log/aether (root-owned dir, service-writable files)
- Wrapper script parses env literally without shell expansion
- Auto-prune old releases (default keep 3)
- README documents macOS launchd commands
2026-05-12 15:36:29 +08:00
fawney19 6f620d92be Skip release checksum verification in installer 2026-05-07 19:32:39 +08:00
fawney19 b8fc36033b Improve installer language and download source prompts 2026-05-07 18:53:09 +08:00
fawney19 96f9be26da polish usage output rate and installer progress 2026-05-07 13:39:25 +08:00
fawney19 fd44906bb7 fix provider pool quota status handling 2026-05-07 11:28:44 +08:00
fawney19 4bd49d0d7a Add unified install script and release packaging 2026-05-06 20:03:07 +08:00